>> the folk who sign dns zones are not even in the same building as the >> folk who deal with address space. > I think the idea is to effectuate de-siloing in this space to the > point that the DNS folks would make the appropriate delegations to the > addressing folks, who would then proceed to create/administer their > RRs/certs without further day-to-day reference to the DNS folks.
read more carefully. i was responding to danny taking my bait of using dns keying for resource keys. randy